Jun ,15 04 10: 10a 



bee&associates pc 



972-367-2008 



IN THE CLAIMS. 

1 . (Currently Amended) A method in a data processing system for providing access 
to resources within the data processing system, the method comprising the data 
processing system implemented steps of: 

receiving a request from a requestor to access a resource in the data processing 

system; 

sending a first cookie to the requestor in response to the request, wherein the 
cookie is used to access the resource; 

storing an identification of the requestor and the first cookie to form a stored 
identification and a stored cookie, wherein the ide^nHfin^tin^ pf the req i.^.tor i^^tifi^ . 
particular data processing system from w h ich the reg iifts t originated - 

responsive to receiving a second cookie from a source, comparing an 
identification of the source and the second cookie with the stored identification and the 
stored cookie to determine whether the ..econrf r ookie contmn. th. same infermr.f.nn 
the first cookie and whether the second coolr.> w as received from the nartir..Ur H.f. 
processing system ; and 

responsive to a match between the identification of the source and the second 
cookie and the stored identification and the stored cookie, allowing access to the 
resource. 

2. (Original) The method of claim 1 , wherein access to the resource is allowed by 
accqjting the second cookie. 

3. (Original) The method of claim 1 fiirther comprising: 

responsive to an absence of a match between the identification of the source and 
the second cookie and the stored identification and the stored cookie, rejecting the second 
cookie. 

4. (Original) The method of claim 1, wherein the resource is a file and the first 
cookie identifies disk location of the file. 
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5. (Original) The method of claim 1 , wherein the source is a web server. 

6. (Original) The method of claim 1, wherein the step of storing an identification of 
the source and the first cookie to form a stored identification and a stored cookie 
comprises; 

storing the identification of the source and the first cookie in a cache. 

7. (Original) The method of claim 6. wherein the identification is an Internet 
protocol address. 

8. (Original) The method of claim 1 , wherein the steps of receiving, sending, 
storing, comparing, and allowing are performed in a browser. 

9. (Original) The method of claim 1, wherein the resource is a file having a path and 
further comprising: 

generating a disk location number firom the path; and 
placing the disk location number into the first cookie. 

10-16. Canceled. 

1 7. (Currently Amended) A data processing system comprising: 
a cache; 

a cookie management process, wherein the cookie management process generates 
a cookie in response to receiving a request to access a resource within the data processing 
system fi-om a requestor; sends the cookie to the requestor, stores the cookie and an 
identification of the requestor in the cache wherein the identification of fb^ r^q .,>.ct^- 
identifies a particular data processinp .sv>itp m from which the rgouest orip nnaf^^; 
responsive to being presented a received cookie fi-om a source, compares the cookie and 
the identification of the requestor to the received cookie and the source todetemiine 
whether the received cookie contains the s ame InrormnHon as the cookie sent to the 
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p. 6 



requestor and whether the received cookie was r e ceived from th.. particular data 
processing system ; and allows access to the resource in response to a match between the 
cookie and the identification of the requestor with the received cookie and the '. 



■ soiurce. 



(Original) The data processing system of claim 17, wherein the requestor i 



18. ^ _ 

is a 

server. 



19. (Original) The data processing system of claim 17, wherein the resource is a file. 

20. (Original) The data processing system of claim 1 7, wherein the identification of 
the requestor and the identification of the source are Internet protocol addresses. 

2 1 . (Currently Amended) A data processing system for providing access to resources 
within the data processing system, the data processing system comprising: 

receiving means for receiving a request fi-om a requestor to access a resource in 
the data processing system; 

sending means for sending a first cookie to the requestor, wherein the first cookie 
is used to access the resource; 

storing means for storing an identification of the requestor and the first cookie to 
form a stored identification and a stored cookie, wherein the iriP.nrifiratmn »f tt,^ 
requestor identifies a particular data nroce.^ s ing svstem from which the req uest 
originated: 

comparing means, responsive to receiving a second cookie from a source, for 
comparing an identification of the source and the second cookie with the stored 
identification and the stored cookie to determine whether th e second cnolcie contains th^ 
same information as the first cookie and wh e ther the second cookie wor received from 
the partic ular data processing svstem: and 

allowing means, responsive to a match between the identification of the source 
and the second cookie and the stored identification and the stored cookie, for allowing 
access to the resource. 
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22. (Original) The data processing system of claim 21. wherein access to the resource 
is allowed by accqjting the second cookie. 

23. (Original) The data processing system of claim 21 further comprising: 
rejecting means, responsive to an absence of a match between the identification of 

the source and the second cookie and the stored identification and the stored cookie, for 
rejecting the second cookie. 

24. (Original) The data processing system of claim 21, wherein the resource is a file 
and the first cookie identifies disk location of the file. 

25. (Original) The data processing system of claim 21, wherein the source is a web 
server. 

26. (Original) The data processing system of claim 21. wherein the storing means for 
storing an identification of the source and the fu^t cookie to fonn a stored identification 
and a stored cookie comprises: 

storing means for storing the identification of the source and the first cookie in a 

cache. 

27. (Original) The data processing system of claim 26, wherein the identification is 
an Internet protocol address. 

28. (Original) The data processing system of claun 21, wherein the receiving means, 
sending means, storing means, comparing means, and allowing means are performed in a 
browser. 

29. (Original) The data processing system of claim 21. wherein the resource is a file 
having a path and further comprising: 

generating means for generating a disk location number fi^om the path; and 
placing means for placing the disk locaUon number into the first cookie. 
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30-36. Canceled. 

37. (Cuirently Amended) A computer program product in a computer readable 
medium for providing access to resources within the data processing system, the 
computer program product comprising: 

first instructions for receiving a request from a requestor to access a resource in 
the data processing system; 

second instructions for sending a first cookie to the requestor, wherein the first 
cookie is used to access the resource; 

third instructions for storing an identification of the requestor and the first cookie 
to form a stored identification and a stored cookie, wherein the identifir.tinn »f tt,^ 
requestor identifies a particular data processing s y stem from whirh tl,. r.^ ...,. 
originated : 

fourth instructions, responsive to receiving a second cookie from a source, for 
comparing an identification of the source and die second cookie with the stored 
identification and the stored cookie to determine ^.h.fh.r fU. ...pnd cookie rnnt.inc th. 
same information as the first cookie and wheth^^r t h e second cnnlri^ was receivo.H fr^n, 
the particu lar data processing svstem : and 

fifth instructions, responsive to a match between the identification of the source 
and the second cookie and the stored identification and the stored cookie, for allowing 
access to the resource. 

38. Canceled. 
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